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(54) SYSTEM FOR MANAGING DEVICE SECURITY 

(57)Abstract: 

PROBLEM TO BE SOLVED: To enable a scrupulous 
control about the operation of a device needing 
security management such as copying a confidential 
document. 

SOLUTION: A user is made to carry a RFID and a RFID 
is also attached to the confidential document. A 
copying machine 300 is provided with a reader/ writer 
303 to read the FFUD of the document set in the platen 
and the FRID of the user in front of the machine 300. 
The machine 300 is controlled so as to be able to copy 
the document only when the access right of the user 
read from the FRID of the user is higher than the 
confidential level of the document read the FRID of the 
document on the platen. 
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damages caused by the use of this translation. 

LThis document has been translated by computer. So the translation may not reflect the 
original precisely. 

2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 

[Claim(s)] 

[Claim 1]A system which manages important point security operation of an object device, 
comprising: 

A RFID means of communication which acquires security information which is established near 
said object device, performs communication with RFID, and the RFID holds. 
A judging means which judges whether security information acquired from two or more RFID 
(s) substantially simultaneous is satisfied with said RFID means of communication of terms of 
the license beforehand registered about said important point security operation of said object 
device, A motion-control means to permit execution of said important point security operation 
to said object device only when it is judged that it was satisfied with said judging means of said 
terms of the license. 

[Claim 2]Said terms of the license are conditions which show what kind of case a relation with 
a security level of a user who directs a security level and operation of a subject of said 
important point security operation permits execution of said important point security operation, 
Security information which acquired said judging means from RFID added to a subject set in 
said object device, The device security management system according to claim 1 judging 
whether it asks for each security level and a relation of these security levels satisfies said 
terms of the license from security information acquired from RFID which a user carries. 
[Claim 3]Said terms of the license are the information which showed correspondence with 
identification information of the subject, and identification information of a user who permits 
said operation to the subject for every subject of said important point security operation, 
Security information which acquired said judging means from RFID added to a subject set in 
said object device, The device security management system according to claim 1 judging 
whether it asks for identification information from security information acquired from RFID 
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which a user carries, respectively, and these identification information satisfies said terms of 
the license. 

[Claim 4]Said object device is a copying machine and said judging means, The device security 
management system according to claim 1 with which combination of security information 
acquired from RFID added to a manuscript set to said copying machine and security 
information acquired from a user's RFID is characterized by judging whether said terms of the 
license are satisfied. 

[Claim 5]While an antenna of said RFID means of communication is attached to a manuscript 
saucer of a manuscript feeder of said copying machine, The device security management 
system according to claim 4 communicating to RFID which provided a hollow for setting a 
user's RFID to this saucer, and was added to a manuscript on said saucer by said antenna, 
and a user's RFID set to said hollow. 

[Claim 6]Said RFID means of communication so that RFID added to the manuscript and RFID 
of the user concerned which a user carried can be read simultaneously, when a manuscript is 
set to a copying machine, The device security management system according to claim 4 
having the antenna for communication installed so that it might come between angles which 
comprise a flat surface containing RFID of said manuscript, and a flat surface containing said 
user's RFID. 

[Claim 7]The device security management system comprising according to claim 4: 
The first reader means for said RFID means of communication to read RFID added to a 
manuscript set to a copying machine. 

The second reader means installed in a position which can read a user's RFID. 

[Claim 8]The number of RFID(s) with which said terms of the license communicated 
simultaneously by said RFID means of communication, it being the conditions which specified 
a case where said important point security operation was permitted, and said judging means 
from a relation with a security level of RFID of these each, The device security management 
system according to claim 1 judging whether information on one or more RFID(s) acquired 
simultaneously is satisfied with said RFID means of communication of said terms of the 
license. 

[Claim 9]Said RFID means of communication specific RFID included property information 
which shows that a security level can be copied, The device security management system 
according to claim 1 characterized by giving a security level of said usual RFID to said specific 
RFID when it reads simultaneously with the usual RFID of a predetermined number included 
information on a security level. 

[Claim 10]The device security management system according to claim 1 having a reporting 
means which notifies a user of that when not satisfied with a judgment of said judging means 
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[Translation done.] 
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DETAILED DESCRIPTION 

[Detailed Description of the Invention] 
[0001] 

[Field of the lnvention]lt is related with the system for controlling operation of devices which 

require security, such as a copy of confidential documents. 

[0002] 

[Description of the Prior Art]lt is specified because confidential documents usually push 
stamps, such as "secrecy" or "copy strict prohibition", on a document, and the user has paid 
attention suitable about the copy of the document, etc., seeing the display. 
[0003]There is a system by which the copying machine does not operate unless it gives each 
user the counter which counts the number of copies for fee collection and sets the counter to a 
copying machine. This system has brought about the effect of security in the meaning that only 
an insider with a counter can do a copy. 

[0004]Managing the room where confidential documents are kept by the person similar to a 
guard or it as a method depending on human resources is often performed. Employment which 
can perform a document copy only via a copy person in charge may be performed. 
[0005]ln recent years, printing confidential documents using the special ink which can be read 
only under non-visible light, such as ultraviolet rays and infrared rays, is also performed. In this 
case, even if it thinks that a common copying machine will copy those confidential documents 
although confidential documents can be read in a reading room with an exclusive light source, 
since a common copying machine uses the reflected wave of visible light, the confidential 
documents using the ink which does not reflect visible light easily cannot be copied. 
[0006]However, inconvenient [ by nothing completely becoming impossible ] and the 
troublesomeness which makes the special document serve as general-purpose hindrance. 
[0007] 

[Problem(s) to be Solved by the lnvention]The method which displays "secrecy" etc. is a 
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method depending on the user's morals, and it sees from a security side and it cannot be said 
that it is enough in many cases. 

[0008]Since any documents can be copied if the method which gives each user a copy counter 
has even the counter, it is hard to say that sufficient security is securable from a viewpoint of 
copy management of confidential documents. 

[0009]lt can be said that the method which manages by a guard etc. has many problems at a 
cost aspect, and it depends for it on human being's morals after all. 

[0010]lf the method which uses special ink for confidential documents is seen from a viewpoint 
of the prevention from an illicit copy, high security will be obtained, but there is a problem that 
inconvenience is forced a valid user. That is, when special ink is used, a special copying 
machine is also taken to also take a special light source to read confidential documents, and to 
print confidential documents. 

[001 1]Thus, each managing system of a copy of the conventional confidential documents had 
a problem. As mentioned above, although the case of the copy of confidential documents was 
taken for the example, the situation where the service provided to a user takes management of 
security also has many examples which exist plentifully and automated such a security 
management, for example like the ON leaving controlling device of a secret division. Although 
the operation management of the device concerning such security gives a user an IC card, for 
example and is performed by the method of inserting this card in a device, it is, when just it is 
insufficient, or also when inconvenient. For example, if it says in the case of a copy, in order to 
perform of which level even a user allows a copy according to the grade of the secrecy of a 
document, and fine management, it is in imperfection only by performing user authentication 
by an IC card etc. For example, with an ON leaving controlling device, there is inconvenience, 
like human being of the host side with an effective card for a visitor's (a temporary caller's) 
receipts and payments has to be escorting. 

[0012]This invention is made in view of such a problem, and is a thing. 

It is providing the structure for controlling finely operation of the device which requires the 

purpose. 

[0013] 

[Means for Solving the Problem]ln order to attain the above-mentioned purpose, a device 
security management system concerning this invention, A RFID means of communication 
which acquires security information which is a system which manages important point security 
operation of an object device, is established near said object device, performs communication 
with RFID, and the RFID holds, A judging means which judges whether security information 
acquired from two or more RFID(s) substantially simultaneous is satisfied with said RFID 
means of communication of terms of the license beforehand registered about said important 
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point security operation of said object device, Only when it is judged that it was satisfied with 
said judging means of said terms of the license, execution of said important point security 
operation is permitted to said object device. 

[0014]Since operation of that device is controllable based on information on two or more RFID 
(s) concerned with an object device according to this system, a fine security management 
becomes possible. 

[0015]ln a suitable mode of this invention, said terms of the license are it shown conditions 
what kind of case a relation with a security level of a user who directs a security level and 
operation of a subject of said important point security operation permits execution of said 
important point security operation, and said judging means, It is judged whether from security 
information acquired from RFID added to a subject set in said object device, and security 
information acquired from RFID which a user carries, it asks for each security level and a 
relation of these security levels satisfies said terms of the license. 

[0016]ln this mode, each security level is acquired from RFID of a subject of important point 
security operation, and a user's RFID, and it is judged whether based on these both relation, 
execution of that operation is permissible. For example, when a copying machine is taken for 
an example, a copying machine is equivalent to an object device, copying operation of 
confidential documents is equivalent to important point security operation, and confidential 
documents correspond to the subject, respectively. According to this mode, based on relation 
between a subject and a user, execution of important point security operation is manageable in 
detail. 

[0017]The number of RFID(s) with which said terms of the license communicated 
simultaneously by said RFID means of communication in another suitable mode, it is the 
conditions which specified a case where said important point security operation was permitted, 
from a relation with a security level of RFID of these each, and said judging means judges 
whether information on one or more RFID(s) acquired simultaneously is satisfied with said 
RFID means of communication of said terms of the license. 

[0018]Execution of important point security operation fixed in this mode, when a mutual credit 
guarantee is expected, for example by two or more persons is attained, Compared with a 
former managing system which was performing important point security operation based on 
one certification information, conditioning of a fine operation permission doubled with needs of 
the spot becomes possible. 

[0019]ln another suitable mode, said RFID means of communication, When specific RFID 
included property information which shows that a security level can be copied is read 
simultaneously with the usual RFID of a predetermined number included information on a 
security level, a security level of said usual RFID is given to said specific RFID. 
[0020]ln this mode, only by putting in specific RFID and the usual RFID of a predetermined 
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number in a communication range of a RFID means of communication almost simultaneous, 
Since security information of the usual RFID can be copied to the specific RFID, in an ON 
leaving managerial system etc., it becomes easy to write in the contents of security permission 
which the person needs to a removal slip published to those etc. who have forgotten a caller 
and an ID card. 
[0021] 

[Embodiment of the lnvention][Embodiment 1] In this embodiment, copy management of the 
confidential documents by a copying machine is taken for an example. Therefore, according to 
this embodiment, a copying machine corresponds to the "object device" of a claim. Here, in 
order to explain simply, the information processor and memory storage for a security 
management assume that it is built based on the personal computer of a different body with a 
copying machine. However, the latest copying machine is easy to include the information 
processing function of the security management which has highly efficient MPU and mass 
memory storage inside in many cases, and is explained below in a copying machine. 
[0022]According to this embodiment, RFID (Radio Frequency Identification) is used for a 
security management. RFID is a non-contact reading type data carrier, and builds in the IC 
chip for memory, and the antenna for communication. Although the thing of RFID of plastic 
card format is common, the thing of the form of a thin tag with flexibility is also developed. 
RFID with a small storage capacity may be called a transponder. RFID is mainly classified into 
four kinds of things according to the communication methods (communication frequency etc. to 
be used). This classification is named according to the communication range of RFID and the 
reader writer which write to it, and is called the stuck type, the approached type, the 
neighborhood type, and the microwave type to order with a short communication range. A 
stuck type is a thing using the electrostatic induction of short wave, and the communication 
range is several millimeters. An approached type is a thing using the electromagnetic induction 
of short wave, and the communication range is 1 cm to about 30 cm. Type is a thing using the 
electromagnetic induction of the long wave soon, and the communication range is 30 cm to 
about 70 cm. A microwave type is what used the electromagnetic induction of microwave 
literally, and a communication range is about 10m from 3 m. Although a microwave type IC 
card uses a cell as a power supply in many cases, the card of other three molds has a 
common thing of a non-cell which acquires a power supply by the electromagnetic induction 
from a reader writer, etc. According to this embodiment, type thru/or microwave type use will 
be assumed soon. 

[0023]As shown in drawing 1 , the system of this embodiment is built in the one secret room 
100. The confidential documents which are the targets of copy management are kept by the 
bookshelf 108. As shown in drawing 2 , RFID201 is stuck on the confidential documents 200. 
The bookshelf 108 and the copying machine 106 are in the same secret room 100, and the 
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entrance is protected at the door 107 with the reader writer 103. 

[0024]The reader writer is provided not only in the portion of the door 107 but in the copying 
machine 106 and the bookshelf 108 (the reader writer 102 and the reader writer 109). Each 
reader writer 102,103,109 is connected to the security management apparatus 104. The 
memory storage 105 which memorized each user, the ID number of each document, the 
conditions of copy permission of confidential documents mentioned later, etc. is connected to 
the security management apparatus 104. Each reader writer emits an interrogation wave, for 
example, when a specific event occurs, every constant interval (from tens of milliseconds to for 
example, about several seconds), and. If there is RFID within limits which can communicate a 
reader writer, the RFID will reply the response wave modulated by the self data to hold. If this 
response wave is received, each reader writer will extract the data contained in that response 
wave, and will transmit to the security management apparatus 104. 
[0025]As shown in drawing 2 , each user 202 shall carry RFID203. Since the security 
management apparatus 104 does not permit the open operation of the door 107 unless 
RFID203 [ effective ] is detected by the reader writer 103 even if it thinks that the user who 
does not carry RFID203 will carry out confidential documents, the user does not put in in the 
secret room 100. When those who are not satisfied with the user who carries effective RFID of 
the security level of confidential documents try to carry out confidential documents from the 
secret room 100, the security management apparatus 104 is kept from opening the door 107. 
Of course, also when entering a room, the security level of RFID to carry is checked and it is 
closed [ it is and ] made to open a door. 

[0026]A reader writer processes the interrogation wave which usually transmits with the 
antenna which communicates by RFID and an electric wave, and this antenna, and the 
response wave which receives, or consists of the control section which performs an exchange 
of the security management apparatus 104 and data. Below, when details are not required, 
what is written in distinction from the antenna of a reader writer, a control section, etc. is not 
done, but it will only be written as a reader writer. 

[0027]The reader writer 102 attached to the copying machine 106 is allocated so that RFID201 
of confidential documents and RFID203 of a user which were set for the copy can be read 
simultaneously substantially. 

[0028]The antenna of the reader writer 102 is embedded in the copying machine 300 to the 
covering 302 which presses down the manuscript copied, as shown in drawing 3 (a). Drawing 
3Jb) shows the example which formed the antenna 305 of another form (rectangle) of a reader 
writer in the field by the side of the presser foot of the covering 304 of the copying machine 
300. After a user places a manuscript on the copy side 301 and shuts this covering 302, he 
places his RFID203 on that covering 302. Then, the reader writer 102 communicates with 
RFID attached to the manuscript on a copy side with the user RFID on the covering 302 
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(exchange of an interrogation wave and a response wave), acquires each security information 
to hold, and sends it to the controlling device 104. The security management apparatus 104 
does not permit a copy to the copying machine 106, when a user's RFID is not detected (that 
is, the user's RFID security information does not reach the reader writer 102). That is, unless 
an operation permission is fundamentally obtained from the security management apparatus 
104, the copying machine 106 in the secret room 100 is constituted so that copying operation 
cannot be performed. 

[0029]lt seems that the data structure of the security information which RFID of confidential 
documents and a user's RFID hold is shown, for example in drawing 4 . That is, security 
information consists of peculiar ID number 401 and the security level 402 of RFID. ID number 
401 serves as identification information of the document in which the RFID was stuck, or the 
user who carries the RFID. Although various kinds of data may be included besides this, since 
being concerned with this embodiment are these two data, security information is stopped for 
mentioning them here. 

[0030]When it is a document, it is a positive integer showing the degree of the secrecy of the 
document, for example, a degree of secrecy is so high [ the security level 402 ] that the figure 
is large. On the other hand, the security level 402 of a user's RFID is a numerical value as 
which a user expresses the highest degree of secrecy allowed handling. Therefore, when the 
security level of a user's RFID is not more than the security level of RFID of a document, a 
user is managed so that the document may be carried out or it cannot copy. That is, it is made 
for the copying machine to operate, whenever it is M>=K, when the security level of 
confidential documents is [ a user's security level ] M in K. 

[0031 ]The process of copy management using RFID is shown in drawing 5 . The flow chart of 
drawing 5 shows the processing operation of the controlling device 104. If a user pushes the 
button of a start of the copying machine 106, that will be transmitted from the controller of the 
copying machine 106 to the controlling device 104 by this event. The controlling device 104 
which received this sends a command of interrogation wave discharge to the reader writer 102 
of the copying machine 106 (Step 1001). The reader writer 102 which received this command 
sends an interrogation wave, and receives the response wave from RFID of the confidential 
documents put on the copy side 301 over this, and a user's RFID placed after the covering 302 
from an antenna (Step 1002). if there is no response wave, if the security information of RFID 
is not transmitted from the reader writer 102 namely,, the decision result of Step 1002 will be 
denied (N), and the controlling device 104 will end processing in this case, without carrying out 
anything. Therefore, since permission of copying operation is not given to the copying machine 
106 in this case, the copying machine 106 will not perform a copy but will be in a waiting state. 
If there is a response wave, the controlling device 104 will ask for the security level of a 
document and a user from the security information of the response wave, respectively, and will 
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compare both (Step 1003). If a user's security level is less than the security level of a 
document, the decision result of Step 1003 will be denied (N). In this case, the controlling 
device 104 ends processing, without performing anything. That is, since the signal of copying 
operation permission is not sent to the copying machine 106 from the controlling device 104 in 
this case, the copying machine 106 stands by with prohibition of copying operation, by the 
judgment of Step 1003, if a user's security level is more than the security level of a document, 
it is alike, and will move to Step 1004, and the controlling device 104 will send a copying 
operation permission command to the copying machine 106. Thereby, the copying machine 
106 will be in the state in which copying operation is possible, and will copy the document on 
the copy side 301. If a copy finishes, the controlling device 104 will be in the state of waiting for 
the notice which tells a start button depression event from the copying machine 106 again. 
[0032]Fine copy management which took into consideration both the degree of secrecy of 
confidential documents and the secret right to access granted to the user by the above 
processings can be performed. 

[0033]Management which allows a copy only within a specific user in the system of this 
embodiment for every [ other than the copy management using the above security levels ] 
document is also possible. In this case, a table as shown in drawing 6 which expresses terms 
of the license with the controlling device 104 is provided. The example of three kinds of tables 
is shown in drawing 6 . In the table (a), the ID and ID of the user who permits the handling of 
the confidential documents (a copy and carrying out) are registered for every confidential 
documents. When managing using this table, the controlling device 104, It is judged whether 
from the security information of RFID of the document sent from the reader writer 102 of the 
copying machine 106, and a user, the ID number of a document and a user is extracted, 
respectively, and that user is permitted the copy of that document with reference to this table. 
Therefore, in the case of this method, only the information on an ID number should be included 
in RFID, and the information on a security level is unnecessary (the example of drawing 4, and 
comparison). 

[0034JID of the user whom the table of (b) of drawing 6 allows the handling to the document of 
the level for every security level of a document is registered. In this case, the controlling device 
104 judges whether with reference to this table, that user is permitted the copy of that 
document from the information on the security level of the document received from the reader 
writer 102, and the information on a user's ID number. 

[0035]The conditions of a user's security level that the table of (c) of drawing 6 allows the ID 
and the handling to the document for every document are registered. In this case, the 
controlling device 104 judges whether that user has satisfied the conditions shown in that table 
from the ID number of the document received from the reader writer 102, and a user's security 
level. 
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[0036]The controlling device 104 will send a copying operation enabling signal to the controller 
of the copying machine 106, if the terms of the license of a copy are satisfied as a result of the 
judgment based on such a table. Otherwise, no controlling devices 104 are carried out, but, as 
a result, the copying machine 106 becomes not moving with as. 
[0037]As one method, whenever a copy is performed once, the controller of the copying 
machine 106 is changed into a default copying operation improper state. And RFID added to 
the document whenever the user pushed the button of the copy start, and a user's RFID are 
reread. This is an example to the last. 

[0038]A door and the reader writer 109 are formed in the bookshelf 108 which keeps 
confidential documents, and more advanced secrecy can be maintained by controlling opening 
and closing of the door, etc. by the security management apparatus 104. That is, when the ID 
number of RFID of the user who came by the reader writer 109 near the bookshelf 108 is 
identified and an ID number is not able to be detected, it is keeping a door from opening etc. In 
this method, ID of the user who opened the bookshelf 108 is also recordable with the 
controlling device 104. RFID of the document which a user tried to pick out from the bookshelf 
108 is read by the reader writer 109, The security level of the user who tried to take the 
document and it out is inspected like the case of copy management, and when it becomes 
clear that it is a document in which the user is not permitted access, the measures of emitting 
an alarm from the controlling device 104 to an appropriate administrator can be taken. 
[0039]Thus, in this embodiment, about the copy of confidential documents, fine security control 
can be performed from both sides of a user and a document, and an unnecessary disclosure 
of a secret matter can be prevented. 

[0040][Embodiment 2] This embodiment is related with the handling of the user RFID in copy 
management, and is concerned with claim 5. 

[0041]According to this embodiment, as shown in drawing 7 , the manuscript saucer of the 
manuscript feeder 501 is equipped with the antenna 502 of the reader writer of the copying 
machine 500 (only superstructure is illustrated). In this composition, the antenna 502 of a 
reader writer is attached so that the portion of the manuscript scan position of the feeder lower 
part may be covered. The user's RFID was provided in the saucer of the feeder 501 , and 
becomes depressed, and I have it put on 503. If I have a document to copy besides placed, 
both RFID(s) of a user and a document can be read without interfering with copying operation. 
In this case, a copy becomes impossible, when at least one sheet is read and an improper 
manuscript arises. It is performed as follows, for investigate every sheet and investigating 
whether it can copy. 

[0042]That is, as another antenna arrangement, when the manuscript on a saucer is conveyed 
to a copy side (platen), it is also suitable for the position which covers the corner part 504 of 
the feeder 501 along which it rotates and passes to form an antenna. In this case, it is made to 
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get what is necessary to be just to place a user's RFID on the corner part 504 of the feeder 
501. RFID of a manuscript and a user can be read without blocking manuscript conveyance at 
the time of a copy also in this case. 

[0043]Security management processing of this embodiment is the same as that of 
Embodiment 1 fundamentally. However, since the manuscript feeder 501 which carries out 
power feed of the manuscript is used, the security management apparatus 104 performs 
control which this point considered. 

[0044]That is, the control state of a copying machine is reset to a copy prohibited state, 
whenever one copy is performed. And when feeding and reading a document, RFID of the 
document is read and the security level is checked. Here, it is a check of a security level, and 
when judged with the ability of the user not to copy the document, it is preferred to deliver 
paper for example, without copying the document, and to feed the following document. In this 
case, only what can be copied can be copied, without interrupting reading of documents. 
[0045]ln the procedure algorithm of Embodiment 1 which showed drawing 5 the procedure of 
this processing, The step of "sending the command of feeding a document to an one-sheet 
copy side to the controller of a copying machine" is added before Step 1001, and a loop is 
made instead of processing of an end, and it is realizable if it is made for control of an 
algorithm to return before the above-mentioned feeding processing. What is necessary is just 
to terminate an algorithm, when nothing is no longer sent, even if it feeds a manuscript. 
[0046]According to this embodiment, they can be copied continuously, carrying out security 
control of two or more documents. 

[0047][Embodiment 3] This embodiment is related with another gestalt of the antenna 
configuration of the reader writer of a copying machine, and is related with claims 6 and 7. 
[0048]According to Embodiments 1 and 2, the user had to place RFID to carry on the copying 
machine. In this example, an antenna is arranged so that it can copy, while the user had 
carried RFID. 

[0049]The first method attaches to the near side of a copying machine the second reader 
writer for users other than the reader writer which reads a document, for example. Since a 
communication region differs between the reader writer for documents, and the reader writer 
for users, they send an electric wave simultaneously, and they can start reading. The antenna 
of the reader writer for users will be formed in the portion 304 of the angle which Kamitsura of 
a copying machine and a front face cross, if it says by drawing 3 . What is necessary is just to 
choose the thing of the communication range of the grade which covers the position (for 
example, neighborhood of a user's breast to the waist) of a user's RFID which stood in front of 
the copying machine as this antenna. 

[0050]A loop antenna is attached to the front face of a copying machine in the second method. 
Since the loop antenna can do a communication region in the form where it is usually the same 
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a front and behind that, one side can read RFID of the document on a copying machine, is 
another communication region and can read RFID of the user who attached to the waist. The 
copying machine is made of metal, and since this communication region is influenced with 
metal, the shape and the setting position of communication electric power or an antenna take 
cautions enough to it. Since the toner used for a copy is charged, it is necessary to devise so 
that an electric wave may not go to the portion of the roller with which a toner is attached. For 
example, what is necessary is just to cover the part by the side of the inside of a copying 
machine of an antenna with metal etc. 

[0051]The third method reads two RFID(s) by one communication region of a loop antenna (in 
the second method of the above, two RFID(s) were read by two communication regions made 
to the both sides of a loop antenna). It is necessary to fully take direction of an antenna into 
consideration in this method. Here, "direction" of an antenna means the direction to which a 
communication range becomes the maximum from the device of an antenna. When an 
antenna is looped shape, direction of an antenna becomes in the vertical direction to a flat 
surface including a loop. If direction of an antenna is parallel to RFID (antenna) which a user 
carries, It becomes difficult to pass along the magnetic flux which comes to the small antenna 
of a user's RFID from an antenna, and becomes difficult to read a user's RFID (generally the 
document on a copy side is level, and RFID which a user carries is vertical (it hangs from a 
head)). If direction of an antenna is carried out to parallel in a copy side, direction of an 
antenna will become parallel to RFID of a document, and it will become difficult to read RFID of 
a document shortly in a similar manner. Therefore, the above problems will be solved, if an 
antenna is installed so that it may not become parallel to both direction of a user's RFID and 
direction (these are mutually right-angled) of a copy side. For example, if direction of an 
antenna is set to the level surface specified by the copy side and the vertical plane which faces 
the user who stood on the front face of a copying machine become an angle of 45 degrees 
from ********** t RFID of both a user and a document can be read. If it illustrates, as shown in 
drawin g 8, the antenna of a reader writer, The level surface specified by the copy side of the 
copying machine 1 100 with which the document 1 105 in which RFID1 101 was attached is set, 
What is necessary is just to allocate in the direction near 45 degrees as much as possible in 
the range 1 103 of the angle of 90 degrees between the vertical planes which counter the user 
1104 (RFID1102) who stood before that (navigational panel side). 

[0052]According to this embodiment, in one reader writer, without carrying out complicated 
operation of a user placing RFID on a copying machine, it can read simultaneously with a 
user's RFID and RFID of a document, and secret motion control of a copying machine can be 
performed. 

[0053][Embodiment 4] This embodiment is related with claim 8. 

[0054]Usually, in an ON recession managerial system, a one user demands the open 
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operation of a door by holding up the card which contains RFID to the reader writer installed 
near the entrance door. At this time, a reader writer reads the security information of RFID and 
sends that information to a security management apparatus (for example, device 104 of 
drawing 1 ). The ID number in the security information judges whether it is just ID to which 
access into the room was accepted with reference to a predetermined management data base, 
if a controlling device is just ID, it will open a door, otherwise, a door is not opened. 
[0055]This method is a very strict managing system, depending on the case, is too strict and 
may become inconvenient. For example, when the card has been forgotten by chance, it 
cannot go into the secret room 100, but it is considered that required work becomes 
impossible. In such a case, although it is coped with [ that I publish a temporary ID card and 
get the user to have etc. and ] in many cases, In such a case, with a temporary ID card, the 
same security clearance as a person's in question true ID card may not be acquired, and many 
several rooms where confidential levels differ may become being in one building 
inconveniently. 

[0056]Even if the person who generally accompanied it in the ON leaving controlling device 
when one person had an effective card does not have a card, when those whom the card has 
open a door, a companion's entrance into a room is possible for him. However, if the specific 
persons (guard etc.) who had an effective card also in this case are not, it may say that serious 
time can be kept waiting until that person comes, and is inconvenient. 

[0057]Now, those who generally use the room where a degree of secrecy is high are restricted. 
Therefore, when there is a user two persons or more, even if a special administrator is not, 
each can guarantee credit. That is, the user of the room where a degree of secrecy is high 
knows each other in many cases, and can guarantee mutual trust in many cases. Therefore, 
convenience will be attained by entering a room possible with two or more users' credibility, 
guaranteeing security, according to this embodiment, according to this view, ON leaving 
management which carried out until coexistence of security and the convenience to some 
extent is performed. 

[0058]ln this way, if there are two or more persons, there are many examples in which things 
by which the guarantee of security is made are made. For example, the safe-deposit box of the 
conventional method of a bank, etc. have a key of the person himself/herself and a key by the 
side of a bank, for the first time, an applicable safe can be opened and this is considered to be 
a kind of the credit guarantee by two or more persons. 

[0059]The treatment of asking a guard for permission one by one, and opening a door that only 
a specific person uses the room, although it goes into the management offices, such as a 
dangerous object or a powerful drug, may be made. If a mutual credit guarantee is gained, 
while entrance into a room will become possible and convenience will increase, a guard can be 
abolished depending on the case and this can also cut down human-rights expense, because 
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several persons are in a user. In a hospital, in order to press down the pain of a cancer patient 
or an intractable disease person, morphine may be used. Since this morphine is regarded also 
as narcotics, the safe in which only the director is keeping morphine cannot open it in many 
cases. However, morphine may be suddenly needed when neither midnight nor the director is. 
For example, if the rule of opening a safe if there are two medical practitioners, or as long as 
there are one medical practitioner and two nurses is decided and it can manage according to 
the rule, it cannot be overemphasized that the convenience in case of emergency improves. 
[0060]ln the above-mentioned Embodiments 1, 2, and 3, although one RFID was added to 
documents, another side was RFID which a user carries, and both were able to move the 
copying machine, only when a security level was satisfied. Although both RFID differs in the 
thing (attribute) holding it, In the field of control of security, or the algorithm of control of a 
controller, Embodiments 1, 2, and 3 can also be realized to be kinds of a system which 
manage operation of the device of an administration object based on the relation of the 
security information of two or more RFID(s). 

[0061]Some stages are among the security levels (secret right to access) given to a user. If the 
persons of what kind of security level gather only which, a credit guarantee should do 
(entrance into a room and a safe door). [ and ] If other processings are accepted, the rule of ** 
is defined, it judges whether the security level of RFID of the everybody who read 
simultaneously by the reader writer satisfies the rule with the security management apparatus 
104 and processing of entrance into a room etc. is managed, a fine security management is 
possible. 

[0062]As a rule, for example as a simple example, if entrance into a room (or processing) 
becomes possible and more than K (>1) person is on the second level alone, entrance into a 
room will become possible, and with the highest security level, a rule which that a room cannot 
be entered says can be considered on the level not more than it. Probably, it will be clear that- 
izing can be carried out [ rule ] using a security level, when saying that it will allow opening a 
safe if there are one medical practitioner and two or more nurses simultaneously, although the 
above was a very simple example. According to this embodiment, based on the combination of 
such two or more persons' security level, the mechanism which controls predetermined 
processing operation, such as the door opening close, is provided. 

[0063]The procedure of this embodiment is shown in the flow chart of drawing 9 - drawing 11 . 
Below, although explained taking the case of control of the closing mechanism of the entrance 
door in entrance management, it will be easily understood from the following explanation that it 
can apply to the motion control of the device with which the same security management 
requires a copying machine and other security managements. 

[0064]Hereafter, the algorithm of this example is explained based on the flow chart of drawing 
9_- drawing 1 1 . Here, since entrance management is taken for an example, please refer to 
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drawing 1 as a system configuration. 

[0065]As shown in drawing 9, the reader writer 103 of an entrance carries out repeating 
transmission of the interrogation wave with a constant interval, and is checking the response 
wave from RFID (Step 601). If there is no response wave, the judgment of Step 601 will turn 
into that it is denied (N), and a loop will be repeated. 

[0066]The security management apparatus 104 shifts to Step 603, when RFID currently 
checked when there was a response wave judges at Step 602 that it is only one and RFID can 
check only a piece, and when two or more pieces can be checked, it shifts to Step 604. The 
details of the procedure of Step 603 are described by the flow chart of drawing 10 , and the 
details of the procedure of Step 604 are shown by the flow chart of drawing 11 . 
[0067]The detailed procedure of Step 603 is explained with reference to drawing 10 . This 
procedure is a case where a reader writer does not check only one RFID. In this case, the 
security level of RFID which the security management apparatus 104 is Step 701, and was 
checked has it judged whether it is a level which can obtain permission of the open operation 
of an entrance door. 

[0068]lf it is a level which can obtain permission, a command of an operation permission will 
be sent to the controller of the device (here closing mechanism of a door) of the object of 
control (Step 702). If there is nothing right [ that ], an operation permission will not be sent to 
an object device, but error handling, such as a warning process, will be performed (Step 703). 
Since the door operator which is an object device has not obtained the operation permission in 
the case of Step 703, a door is not opened. After Step 702 or 703 finishes, it returns to Step 
601. 

[0069]A detailed procedure of Step 604 is explained with reference to drawing 11 . This 
procedure is processing when RFID can check two or more sheets. In this case, the controlling 
device 104 is Step 801 and the security level of two or more RFID(s) currently checked 
simultaneously judges whether the operation permission conditions of the object device (door 
operator) beforehand registered into the controlling device 104 are fulfilled. The example of 
drawing 11 shows the case of the simple rule (rule that the person of a certain level should just 
be in more than K person) illustrated before. In this case, it is judged whether there are K or 
more RFID(s) more than a predetermined security level at Step 801 . If that is right (the result of 
Step 801 is Y), a command of an operation permission will be sent to the controller of the door 
operator which is an object device (Step 802). Thereby, the door of an entrance is opened and 
people come to put in indoors. When the decision result of Step 801 is denial (N), error 
handling, such as a warning process, is performed (Step 803). In this case, since the door 
operator has not obtained the operation permission, a door does not open. After Step 802 or 
803 finishes, it returns to Step 601 . 

[0070]Although the simple example explained the above, various variations can be considered 
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by the rule for the judgment of the operation permission of Step 801 . For example, the rule 
which defines the number needed for every security level, such as "granting a permission if 
one or more persons, and level 1 - two or more persons of two have a person of the levels 3- 
5", is also considered. The value of a security level is considered to be the point and the rule of 
it granting a permission, if total of the security level of RFID read simultaneously becomes 
more than a predetermined threshold is also considered. 

[0071]Thus, since operation of an object device (for example, door operator) is controllable 
from the relation of two or more persons' security level according to this embodiment, 
compared with a system, a more flexible system can be built conventionally which was 
performing the security management only based on one human being's security information. 
[0072][Embodiment 5] This embodiment is concerned with claim 9. 
[0073]ln ON leaving management, when general, a visitor (caller) enters a room possible in 
many cases because authorized personnel with an effective ID card (RFID) accompany. Even 
if it is authorized personnel, when the card of RFID has been forgotten, put into a guard and it 
is given, or a name is registered in a guard place and the badge etc. which cannot open and 
close a door are provided. Anyway, it must open in someone and must be given in the place of 
a door, especially - authorized personnel - when the person himself/herself has forgotten the 
ID card, it is inconvenient and productivity falls. 

[0074]So, in this embodiment, temporary RFID is published to the authorized personnel who 
have forgotten the visitor and the RFID card, and the mechanism which gives a security level 
automatically is provided by attestation from other authorized personnel to the removal slip. 
That is, in this embodiment, if other authorized personnel accept in more than a prescribed 
number, a security level equivalent to these authorized personnel will be automatically given to 
a visitor etc. Attestation of other authorized personnel is made to be performed automatically, 
when a visitor accompanies with these authorized personnel and passes through the inside of 
the communication range of a reader writer. Namely, if people with temporary RFID and the 
authorized personnel involved in a prescribed number who require for the person's attestation 
come near the reader writer of an entrance in order to go into an office etc., for example, It is 
detected by a reader writer and the information on a security level equivalent to these 
authorized personnel is written in temporary RFID from a reader writer. 
[0075]This resembles the case of Embodiment 4 described previously. A different point is a 
point of making another RFID which a door cannot open if the number of predetermined 
persons is in others, but can open a door (the security level which can open a door in RFID 
strictly is given). 

[0076] However, if the security level can be copied with any cards, the card of a high security 
level will come to hand by a certain method, and the level will be able to be copied to its thing. 
What is necessary is just to give the property information on the security which shows that it is 
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a temporary card to a temporary RFID card, for example, if it is going to prevent such an 
unauthorized use. By carrying out like this, the copy of a security level can be copied only to 
the limited special temporary card. Since the temporary card itself steps on a fixed procedure 
and it is delivered in a guard place etc., the security of the remarkable level is secured. If the 
term of validity of the temporary card will be limited with the limitation etc. for one day, for 
example, security will improve. 

[0077]Processing of this embodiment is as follows. That is, when the security management 
apparatus 104 acquires the security information of two or more RFID(s) read simultaneously 
from a certain reader writer, it is judged whether the security information of temporary RFID is 
included in it. May judge whether the property information which shows the removal slip which 
mentioned above whether it was temporary RFID is included, and, It may be judged whether 
the thing applicable to it is in the RFID group which limits beforehand the ID number used for 
temporary RFID, registers it into the controlling device 104, and was read. If temporary RFID is 
in the RFID group read simultaneously, the controlling device 104 will write the value of other 
RFID group security levels read simultaneously in the temporary RFID via a reader writer. 
[0078]Generally, since those who have forgotten RFID can copy a security level almost 
equivalent to their own thing to temporary RFID if the person of a said division office is asked 
for a companion, his trouble of the business of the day decreases substantially. 
[0079]Since the automatic write of the security level equivalent to the person can be carried 
out to temporary RFID only by accompanying with a person with effective RFID according to 
this embodiment, Temporary RFID which can realize desired security without time and effort, 
such as performing desired security setting out with a help, at a removal slip issue place is 
obtained. 

[0080][Embodiment 6] This embodiment is related with claim 10. In Embodiments 1, 2, and 3, 
when a user's security level is less than the security level of a document, a copy is not made. 
In this case, in this embodiment, the error code which shows that copy terms of the license are 
not fulfilled from the security management apparatus 104 to the copying machine 106 is sent. 
Based on it, for example, the controller of the copying machine 106 which received this error 
code corresponded to that code, it displays the message which cannot be copied as shown in 
drawing 12 on the liquid crystal display etc. of the navigational panel provided in a copying 
machine. A voice generator is attached to the copying machine 106, and it may be made to 
notify a purport [ that it cannot copy to a user ] that a sound is instead of a visible display. 
[0081]According to this embodiment, the user can exclude the futility of time to happen 
although it can be known whether a copying machine can be used and not being known for 
what kind of reason therefore. 



http://ww4.ipdl.inpit.go.jpte 2/15/2008 



JP,2001-1601 17,A [DETAILED DESCRIPTION] Page 16 of 16 

[Translation done.] 



http://www4 .ipdl .inpit.go jp/cgi-bin/tran_web_cgi_ejje?atw_u=http%3 A%2F%2Fwww4.ip. . . 21 1 5/2008 



